$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: Ot7Rd64v197plg7HWLX0TEgBFtnStc9Znjwod/yyDDE= Subject key identifier: 03:B9:6C:F2:EF:DD:BE:83:3E:20:FC:57:42:7A:8E:10:6C:23:C9:6C Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 69D0DB71670C7B3E8A3BE02076C301A650C22F67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 16:43:42 +0000 Manifest this update: Fri 17 Jul 2026 16:38:42 +0000 Manifest next update: Sat 18 Jul 2026 20:18:42 +0000 Files and hashes: 1: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: Oh0Wfps5uiIrWQAjZ9/TfZU3ieKSsaIqHPaaONEHhOM=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d0:db:71:67:0c:7b:3e:8a:3b:e0:20:76:c3:01:a6:50:c2:2f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Jul 17 16:38:42 2026 GMT Not After : Jul 18 20:18:42 2026 GMT Subject: CN=03B96CF2EFDDBE833E20FC57427A8E106C23C96C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:0d:a3:92:5f:ed:c2:0e:ca:99:d8:7e:c6: 47:7d:b6:16:6f:64:06:e9:3c:17:87:20:ba:a4:fc: 73:ad:17:e3:eb:67:d2:6d:ad:3f:97:43:fa:d8:95: d1:d8:e9:57:69:e1:11:55:78:be:df:6e:3e:3c:41: 48:c6:e7:e1:50:12:3a:7c:cc:9b:6f:e1:74:a5:04: ef:76:2a:85:f1:a9:58:01:29:09:dd:8c:41:1a:20: c7:dc:3b:be:66:93:16:e1:14:72:ad:e2:ef:4e:11: 02:da:a8:e2:6a:f8:06:77:cd:59:7d:de:15:1d:1d: ac:79:84:71:4c:da:6a:0e:27:d8:40:2d:eb:b6:54: 41:5c:ff:da:49:d5:b0:7a:c5:3f:8b:f0:eb:43:ee: 37:ef:ee:fc:1b:fc:ee:79:be:03:1e:c2:21:fb:26: 44:11:75:1d:7f:58:1f:ee:e4:62:8f:6f:a3:38:b2: 22:fe:d5:ff:33:7d:c7:1f:72:da:df:c2:4b:f0:9f: 0c:6a:9e:82:31:bc:63:87:dd:49:3f:83:29:b7:56: 5d:17:02:34:c4:72:3e:e7:c4:f3:55:df:86:af:f4: 31:a2:0f:fb:66:41:2c:6a:c1:87:a5:4a:f2:fe:7f: 84:85:2f:89:31:eb:87:23:79:eb:2b:35:03:07:11: 63:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B9:6C:F2:EF:DD:BE:83:3E:20:FC:57:42:7A:8E:10:6C:23:C9:6C X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ca:c1:f5:9d:2e:f8:6c:80:55:37:8d:c9:08:c2:3e:51:77: cb:b3:0a:94:93:8a:1c:94:fd:6d:63:92:9d:c2:b6:38:b2:56: 21:0a:0d:c1:5f:1b:86:b4:55:f2:c0:b9:32:12:04:a4:9d:28: ba:99:19:ee:25:16:b2:1a:79:7f:d1:67:d8:45:b0:de:d8:64: 28:c2:0d:2e:72:42:2b:bd:8f:a6:30:68:44:a6:33:22:bf:c7: ed:c2:e4:22:0e:34:45:b3:16:09:f7:64:19:75:84:56:eb:63: d6:93:0d:37:e2:ba:05:ac:dc:e4:5f:cd:c7:ba:3a:76:5f:91: de:2f:37:c6:81:0e:ce:95:90:e2:3a:70:57:21:de:36:57:79: 50:b6:59:2e:84:c9:50:33:00:a5:a2:99:dc:2b:e8:18:5c:8b: f4:ec:70:86:af:82:c0:6f:6e:5e:32:6a:01:68:22:6b:5b:96: 2d:ea:b1:05:7c:68:94:33:e6:39:50:22:63:21:50:c7:b3:45: bd:24:ad:9f:a9:4b:17:cd:1e:21:47:7d:82:a8:65:7a:f9:34: 2d:b2:cb:74:27:67:a1:7f:38:54:87:f5:41:ed:8d:30:64:70: 35:8e:8f:6d:5d:43:cf:17:bf:99:79:d8:4b:d1:18:1b:1d:27: 37:8f:29:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadDbcWcMez6KO+AgdsMBplDCL2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA3MTcxNjM4NDJaFw0yNjA3MTgyMDE4NDJaMDMxMTAvBgNV BAMTKDAzQjk2Q0YyRUZEREJFODMzRTIwRkM1NzQyN0E4RTEwNkMyM0M5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsg2jkl/twg7Kmdh+xkd9thZv ZAbpPBeHILqk/HOtF+PrZ9JtrT+XQ/rYldHY6Vdp4RFVeL7fbj48QUjG5+FQEjp8 zJtv4XSlBO92KoXxqVgBKQndjEEaIMfcO75mkxbhFHKt4u9OEQLaqOJq+AZ3zVl9 3hUdHax5hHFM2moOJ9hALeu2VEFc/9pJ1bB6xT+L8OtD7jfv7vwb/O55vgMewiH7 JkQRdR1/WB/u5GKPb6M4siL+1f8zfccfctrfwkvwnwxqnoIxvGOH3Uk/gym3Vl0X AjTEcj7nxPNV34av9DGiD/tmQSxqwYelSvL+f4SFL4kx64cjeesrNQMHEWNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA7ls8u/dvoM+IPxXQnqOEGwjyWwwHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbKwfWdLvhsgFU3jckIwj5Rd8uzCpSTihyU /W1jkp3CtjiyViEKDcFfG4a0VfLAuTISBKSdKLqZGe4lFrIaeX/RZ9hFsN7YZCjC DS5yQiu9j6YwaESmMyK/x+3C5CIONEWzFgn3ZBl1hFbrY9aTDTfiugWs3ORfzce6 OnZfkd4vN8aBDs6VkOI6cFch3jZXeVC2WS6EyVAzAKWimdwr6Bhci/TscIavgsBv bl4yagFoImtbli3qsQV8aJQz5jlQImMhUMezRb0krZ+pSxfNHiFHfYKoZXr5NC2y y3QnZ6F/OFSH9UHtjTBkcDWOj21dQ88Xv5l52EvRGBsdJzePKa4= -----END CERTIFICATE-----Generated at Sat Jul 18 01:48:45 2026 by rpki-client